$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: Bosib/+UK0oGm3hKCtfnED2QY+rZdFP3nlYEURQLGEs= Subject key identifier: 72:6C:E6:09:21:D5:98:02:E3:CA:27:32:CD:6F:3A:7E:59:78:65:08 Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: FB9CEC60DD3A9F94AB5529C95EF63DFFD0D8C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:44:39 +0000 Manifest this update: Tue 12 May 2026 21:39:39 +0000 Manifest next update: Thu 14 May 2026 00:08:39 +0000 Files and hashes: 1: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 2: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: 2rY3KVGMYXBfXIaOs+p3RmDPoBpvzbw0XVBG1lqf46w=) 3: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 4: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 5: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 6: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 7: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 8: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 9: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 10: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fb:9c:ec:60:dd:3a:9f:94:ab:55:29:c9:5e:f6:3d:ff:d0:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: May 12 21:39:39 2026 GMT Not After : May 14 00:08:39 2026 GMT Subject: CN=726CE60921D59802E3CA2732CD6F3A7E59786508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:16:84:4c:e6:82:7e:7c:b5:37:2f:10:33: 7f:1e:b9:f2:75:47:88:d6:8c:06:a1:bc:4e:4d:2c: af:c6:5d:c9:9a:51:66:1c:18:b1:72:8d:cc:1d:37: f5:ae:bf:a8:b9:8f:9e:32:50:af:bc:be:b8:a0:6a: 6a:e9:d0:d5:f4:00:b2:32:3e:ba:7b:4f:ce:c9:29: d3:a0:b4:51:13:50:22:2f:20:91:e1:e5:94:86:d8: 00:b5:d3:cd:40:9a:a1:a2:0d:ca:5b:2d:54:69:b3: 74:06:2c:66:3c:6a:eb:86:42:a2:b3:d7:10:d0:79: 41:c7:21:23:5d:2b:89:cb:a8:ef:6c:0e:70:8b:ca: 4b:c7:35:c8:b7:5d:14:74:c2:83:2e:5d:c8:b5:6f: b7:83:e4:7a:a6:9d:92:6b:1d:3b:96:6b:fb:5e:42: f4:53:84:cf:15:80:a1:41:f2:0d:f5:78:c8:05:ac: a7:64:16:46:6e:65:a3:82:b8:23:0f:cf:31:02:4f: e3:d0:50:7c:98:13:ea:0d:36:a2:3a:18:23:c0:f0: 6c:1a:29:94:bf:17:3c:25:a2:0b:a0:b4:b4:fc:ed: f6:da:b6:b4:98:7b:c6:50:18:47:99:5c:7a:99:3d: 8b:8a:66:2b:59:3f:d3:00:c0:86:38:9b:d8:0c:71: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6C:E6:09:21:D5:98:02:E3:CA:27:32:CD:6F:3A:7E:59:78:65:08 X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:dd:e6:9f:86:b4:8a:9b:66:f2:dd:90:5f:c1:2e:2a:c9:b3: d0:af:fd:ab:e2:33:4c:83:75:dd:49:4b:09:41:a6:4b:30:06: 79:23:61:23:4e:de:35:30:44:51:e7:07:64:20:04:3e:11:f6: 27:aa:9b:d9:e0:4b:b0:bb:44:e6:da:80:d5:d0:91:b3:87:2b: 59:f8:67:3f:37:2e:58:ed:9b:3b:de:e0:7f:d2:b0:35:68:50: b1:06:4b:c3:37:74:5e:1f:e1:64:02:dd:cf:21:6c:91:e8:fd: cb:c7:37:bd:13:72:99:d3:9d:ad:aa:11:68:ea:9c:90:ba:09: da:cc:8c:f2:bf:66:04:21:a4:f9:23:f7:48:17:48:c7:4f:4a: ea:17:ff:78:fd:3a:58:4d:d6:e3:33:b3:7f:59:8c:ad:14:97: 2c:85:0d:e3:e0:43:f1:e6:e2:0d:a7:a7:f2:9f:66:2a:ea:d7: 62:47:da:1e:07:ae:be:d8:78:7f:75:75:4e:dc:31:dc:03:48: 59:84:67:83:d2:db:7b:54:b4:8f:ae:a0:67:6d:7e:6c:16:79: 57:04:a4:89:84:4a:9b:11:83:d1:3f:50:5b:c2:8e:0a:22:38: 8b:16:c5:6c:6c:30:a0:37:a5:fc:21:cb:de:93:15:e5:c5:46: c6:f5:0e:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPuc7GDdOp+Uq1UpyV72Pf/Q2MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA1MTIyMTM5MzlaFw0yNjA1MTQwMDA4MzlaMDMxMTAvBgNV BAMTKDcyNkNFNjA5MjFENTk4MDJFM0NBMjczMkNENkYzQTdFNTk3ODY1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEBaETOaCfny1Ny8QM38eufJ1 R4jWjAahvE5NLK/GXcmaUWYcGLFyjcwdN/Wuv6i5j54yUK+8vrigamrp0NX0ALIy Prp7T87JKdOgtFETUCIvIJHh5ZSG2AC1081AmqGiDcpbLVRps3QGLGY8auuGQqKz 1xDQeUHHISNdK4nLqO9sDnCLykvHNci3XRR0woMuXci1b7eD5HqmnZJrHTuWa/te QvRThM8VgKFB8g31eMgFrKdkFkZuZaOCuCMPzzECT+PQUHyYE+oNNqI6GCPA8Gwa KZS/FzwlogugtLT87fbatrSYe8ZQGEeZXHqZPYuKZitZP9MAwIY4m9gMcVv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcmzmCSHVmALjyicyzW86fll4ZQgwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADd5p+GtIqbZvLdkF/BLirJs9Cv/aviM0yD dd1JSwlBpkswBnkjYSNO3jUwRFHnB2QgBD4R9ieqm9ngS7C7RObagNXQkbOHK1n4 Zz83Lljtmzve4H/SsDVoULEGS8M3dF4f4WQC3c8hbJHo/cvHN70TcpnTna2qEWjq nJC6CdrMjPK/ZgQhpPkj90gXSMdPSuoX/3j9OlhN1uMzs39ZjK0UlyyFDePgQ/Hm 4g2np/KfZirq12JH2h4Hrr7YeH91dU7cMdwDSFmEZ4PS23tUtI+uoGdtfmwWeVcE pImESpsRg9E/UFvCjgoiOIsWxWxsMKA3pfwhy96TFeXFRsb1Dlo= -----END CERTIFICATE-----Generated at Wed May 13 04:54:13 2026 by rpki-client